OSCAL Architect: From Standards to Automated Security Plans

WLG

Den Haag

On-site

EUR 90,000 - 120,000

Full time

6 days ago

Be an early applicant

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

WLG in The Hague is seeking a Security Architect to translate written standards into a structured, machine-readable control catalogue. You will architect the translation from NIST/ISO baselines to policy-as-code and enable continuous compliance across cloud environments.

You will lead mapping of control triggers to identifiers, review evidence, and help generate the first full system security plan from automated data sources, working with stakeholders to validate mappings and remediation paths.

Qualifications

Bachelor's degree with 3+ years of related experience.
3 years across NIST/ISO control frameworks, JSON and YAML, and regulatory mapping.
Translating compliance requirements into code.
Documented experience of process analysis and design.

Responsibilities

Review existing security requirement statements and the baselines behind them.
Import the baseline into a structured, machine-readable control format.
Identify and document technical triggers for the cloud environment.
Map those triggers to specific control identifiers — policy as code.
Review sampled automated evidence for completeness, accuracy and fitness for a system security plan.
Generate the first full system security plan from automated evidence, not by hand.
Run stakeholder sessions to validate mappings, evidence sources and generation logic.
Track issues through to remediation.